The article states that the trader obtained his information by hacking into poorly secured corporate email accounts and configuring auto-forwarding rules to send himself copies of incoming emails. Specifically, he triggered password reset flows with “security questions” and data mined open sources for metadata like family names which helped him guess the answers to the security questions. So overall, it wasn’t a very sophisticated hack, and certainly seems more straight forward than “getting the mobile tracking info of M&A bankers.”